It’s only a WAF bypass of the payload executes on the target.